Consent policy
Date reviewed: 16th march 2026
Effective Date: 2nd November 2023
Next Review Due: 16th march 2027
As an independent therapist, I am committed to protecting the privacy and personal data of my clients. This Consent Policy outlines how I seek and record consent for processing personal data, ensuring compliance with the UK GDPR. This policy helps me provide transparency and build trust with my clients.
Assessing the Need for Consent
Before requesting consent, I carefully evaluate whether consent is the most appropriate lawful basis for processing personal data. I consider whether another lawful basis, such as a contract or legitimate interests, may be more suitable. I understand that consent is only one of the six lawful bases available under the UK GDPR, and it is important to choose the most appropriate basis for each specific processing activity.
Requesting Consent
When I determine that consent is necessary, I ensure that my consent requests are:
- Prominent and Separate: My consent requests are clearly presented and separate from other terms and conditions, making it easy for clients to understand what they are consenting to.
- Positive Opt-In: I use active opt-in methods, such as unticked checkboxes, requiring clients to take a clear action to indicate their consent. I avoid using pre-ticked boxes or assuming consent through inactivity.
- Specific and Granular: I seek consent for each specific purpose and processing activity. If consent is required for multiple purposes, I allow clients to consent separately to each one.
- Transparent: I clearly name my practice and any relevant third parties that may rely on the consent. I provide detailed information about the specific purposes for which the data will be used.
Where services are provided to children, consent will normally be obtained from a parent or person with parental responsibility. Where appropriate, I will also seek the child’s assent and explain the process in a way that is suitable for their age and understanding.
This aligns with safeguarding expectations and the Children Act + GDPR fairness principles.
Consent form content
I use a clear and straightforward consent form that includes:
- A detailed explanation of what the client is consenting to.
- The name of my practice and any third parties involved.
- The specific purposes for which the data will be used.
- A statement that the client can withdraw their consent at any time, along with instructions on how to do so.
- An active opt-in mechanism, such as an unticked checkbox.
Recording and Storing Consent
Once I obtain consent, I:
- Record: Keep a secure record of the signed consent form, noting the date and method of consent (e.g., in-person, via email). I also document what the client was informed of at the time of giving consent.
- Storage: Store these consent records securely, either in a locked filing cabinet for physical forms or in an encrypted digital storage system for electronic records. I use WriteUp to store all electronic consent forms.
Withdrawal of Consent
Clients are informed that they can withdraw their consent at any time. I provide clear instructions on how they can do this, typically by contacting me directly via email or phone. If a client withdraws consent, I promptly update my records and cease any data processing related to the withdrawn consent.
Review and Compliance
I regularly review this Consent Policy to ensure it remains compliant with UK GDPR and reflects any changes in my practice or legal requirements. By adhering to this policy, I aim to provide a high standard of data protection and maintain the trust of my clients.
Lawful Basis for Therapy Records
Most personal data processed as part of providing speech and language therapy services is processed under the lawful basis of contract and the provision of health care. Consent is typically used for additional processing activities such as sharing reports with third parties, recording sessions, or using anonymised information for training or professional development.
Retention of Consent Records
Records of consent are retained in line with my data retention policy and are kept for the duration of the therapeutic relationship and the required professional record retention period.
contact information
If you have any questions about this policy, please feel free to reach out at adhdslt@outlook.com
Signed: Jamie Louise Hollis, ADHD SLT
Job Title: Speech and Language Therapist